Why Don't Sponsors...

**Realpascal** · 09-06-2005, 10:41 AM

Originally posted by Jim Neil

Why don't sponsors use SSL for webmaster sign up forms?
I mean - we are submitting our SSN \ Contact info shouldn't it be via an SSL form?
When a surfer signs up for an adult site you better believe there is SSL.. why don't they use it for us? I've noticed a few that do have SSL for their webmaster sign ups, but not many.

jim

Something to hide ?

I could care less for other people to know where I live and what my Epass account is.

**psili** · 09-06-2005, 10:45 AM

Maybe they don't care - that they don't think it's sensitive-enough information.

Maybe their margins are so tight they can't shell out the money for the SSL cert?

**chemicaleyes** · 09-06-2005, 10:46 AM

Originally posted by Realpascal

Something to hide ?

I could care less for other people to know where I live and what my Epass account is.

As you don't mind..
Name?
Address?
Bank account #?

**fedfest** · 09-06-2005, 11:14 AM

Probably because you're not giving out any sensitive information.. Unlike the surfer that enters Credit Card info, you are really only giving info that can pretty much be found publicly anyways, like by doing a whois on your domain for instance.

**davethetruth** · 09-06-2005, 11:23 AM

Originally posted by Jim Neil

Why don't sponsors use SSL for webmaster sign up forms?
I mean - we are submitting our SSN \ Contact info shouldn't it be via an SSL form?
When a surfer signs up for an adult site you better believe there is SSL.. why don't they use it for us? I've noticed a few that do have SSL for their webmaster sign ups, but not many.

jim

Good point. I'll have them make ours secure.

**VIPimp** · 09-06-2005, 11:25 AM

We do.
___

**Antonio** · 09-06-2005, 11:26 AM

Originally posted by Realpascal

Something to hide ?

I could care less for other people to know where I live and what my Epass account is.

well, if you post your epasporte account here, I'll show you how I (or anybody else for that matter) can get it closed in less than 2 minutes, and you'll have to spend the next three days on the phone with their extremely efficient support

**EroticySteve** · 09-06-2005, 11:27 AM

For a lot of people it's not a SS# but a Fed Tax ID i guess people don't guard these as tightly.

**Realpascal** · 09-06-2005, 11:30 AM

Originally posted by Antonio

well, if you post your epasporte account here, I'll show you how I (or anybody else for that matter) can get it closed in less than 2 minutes, and you'll have to spend the next three days on the phone with their extremely efficient support

If you want to screw someone, there are many ways to do that.
But a hacker that screws with the submission form to receive a copy of the data I submitted, is not looking for ways to close my Epass account

**Jim Neil** · 09-06-2005, 02:13 PM

Originally posted by Realpascal

If you want to screw someone, there are many ways to do that.
But a hacker that screws with the submission form to receive a copy of the data I submitted, is not looking for ways to close my Epass account

Perhaps not - I really don't find it necessary for anyone with a simple packet sniffer to see my info, home phone, dob, SSN \ taxid, etc... etc...
Hell and if you are on a WiFi system... who knows who is potentially listening in. I mean, you are submitting user names and passwords too... whats stopping from someone loggin and changin where to mail the check to, your account numbers... you can imagine what else could be changed.

And since certs are so damn cheap - there is no reason NOT to install one. And if you don't want to pay the money for one from Verisign or what have you... just make one yourself and make it self signed.

-jim

Why Don't Sponsors...

Why Don't Sponsors...

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment